On Fri, Nov 01, 2013 at 08:14:17PM +0000, Richard W.M. Jones wrote:
(1) Virt-builder really needs to be able to source images from multiple places. At the moment there is only one source location allowed, unless the user clumsily uses the --source option to point at another one.
Fixed in 1.25.3 (development version). In Fedora terms this means Fedora 21, but I could backport the upstream patches to Fedora 20 if people are interested in this.
Cool. I think that would be nice given that the F21 timeframe is likely to be a bit long.
(3) Virt-builder requires all images to be GPG-signed. It worries me that these images are neither signed nor downloaded over https.
The solution to this (further down the thread) was to use checksums in the index file. This is possible in 1.24.1 (stable version, Fedora 20) & 1.25.3.
So, what else do we need here?